CVE-2021-35126: Qualcomm QAM8295P Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

• Qualcomm QAM8295P Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SA8295P Firmware: affected versions not specified
• Qualcomm SD778G Firmware: affected versions not specified
• Qualcomm SD780G Firmware: affected versions not specified
• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm SD888 Firmware: affected versions not specified
• Qualcomm Sd 8 GEN1 5g Firmware: affected versions not specified
• Qualcomm Sd 8cx GEN3 Firmware: affected versions not specified
• Qualcomm SM7315 Firmware: affected versions not specified
• Qualcomm SM7325P Firmware: affected versions not specified
• Qualcomm WCD9370 Firmware: affected versions not specified
• Qualcomm WCD9375 Firmware: affected versions not specified
• Qualcomm WCD9380 Firmware: affected versions not specified
• Qualcomm WCD9385 Firmware: affected versions not specified
• Qualcomm WCN6740 Firmware: affected versions not specified
• Qualcomm WCN6750 Firmware: affected versions not specified
• Qualcomm WCN6850 Firmware: affected versions not specified
• Qualcomm WCN6851 Firmware: affected versions not specified
• Qualcomm WCN6855 Firmware: affected versions not specified
• Qualcomm WCN6856 Firmware: affected versions not specified
• Qualcomm WSA8830 Firmware: affected versions not specified
• and 1 more

Published 2022-06-14. Last modified 2026-06-17.